Hi Jochen, Here the output:
index shard prirep state docs store ip node graylog2_14 0 p STARTED 78979192 40.5gb 127.0.0.1 domain.com graylog2_8 0 p STARTED 50004879 24.6gb 127.0.0.1 domain.com graylog2_13 0 p STARTED 100002676 48.8gb 127.0.0.1 domain.com graylog2_9 0 p STARTED 50005637 24.6gb 127.0.0.1 domain.com graylog2_6 0 p STARTED 50001244 24.6gb 127.0.0.1 domain.com graylog2_7 0 p STARTED 68925168 34.8gb 127.0.0.1 domain.com graylog2_4 0 p STARTED 50000795 24.9gb 127.0.0.1 domain.com graylog2_5 0 p STARTED 50002618 24.6gb 127.0.0.1 domain.com graylog2_2 0 p STARTED 20000875 10.2gb 127.0.0.1 domain.com graylog2_3 0 p STARTED 50003323 24.5gb 127.0.0.1 domain.com graylog2_0 0 p STARTED 20001987 10.3gb 127.0.0.1 domain.com graylog2_1 0 p STARTED 20003375 9.9gb 127.0.0.1 domain.com .kibana 0 p STARTED 13 165.2kb 127.0.0.1 domain.com .kibana 0 r UNASSIGNED graylog2_10 0 p STARTED 70002642 34.6gb 127.0.0.1 domain.com graylog2_11 0 p STARTED 90007163 44.1gb 127.0.0.1 domain.com graylog2_12 0 p STARTED 100007815 48.3gb 127.0.0.1 domain.com Thank you !! On Wednesday, July 22, 2015 at 11:50:16 AM UTC-3, Jochen Schalanda wrote: > > Hi Juan, > > please post the output of the following command (replace 127.0.0.1 with > the IP address or hostname of one of your Elasticsearch nodes): > > curl 'http://127.0.0.1:9200/_cat/shards?v' > > > > Cheers, > Jochen > > On Wednesday, 22 July 2015 15:03:45 UTC+2, Juan Andres Ramirez wrote: >> >> Hello Arie, >> In my graylog conf I have this: >> elasticsearch_shards = 1 >> elasticsearch_replicas = 0 >> >> And in elasticsearch conf I have this: >> index.number_of_shards: 1 >> index.number_of_replicas: 0 >> >> So why I have 16 shards in my cluster Health?, That is my question. >> >> Thank you. >> >> >> On Tuesday, July 21, 2015 at 6:25:54 PM UTC-3, Arie wrote: >>> >>> Hi Juan, >>> >>> IHMO for production having 4 ES nodes 4 shards can be fine. The data >>> will be shared on the 4 nodes leaving you >>> with 4 shards. (one on each node) Turning replicas to 1 wil create 1 >>> replicated shard for each one there is. This gives you a backup >>> and improves search speed. >>> >>> This is only in count for the new index that will be created if our >>> setup is already running, but there are some commands >>> in es that can make that happen for the current index. >>> see: >>> https://www.elastic.co/guide/en/elasticsearch/reference/1.6/indices-update-settings.html >>> >>> Choosing the number of replicas: >>> >>> https://www.elastic.co/guide/en/elasticsearch/guide/current/replica-shards.html >>> >>> So for backup take one replica, for speed improvement choose 3 when >>> having 4 nodes. >>> Every node is than capable of serving a search request. >>> >>> A. >>> >>> >>> Op dinsdag 21 juli 2015 15:19:21 UTC+2 schreef Juan Andres Ramirez: >>>> >>>> The cluster health: >>>> >>>> >>>> { >>>> "cluster_name" : "elasticsearch", >>>> "status" : "yellow", >>>> "timed_out" : false, >>>> "number_of_nodes" : 2, >>>> "number_of_data_nodes" : 1, >>>> "active_primary_shards" : 16, >>>> "active_shards" : 16, >>>> "relocating_shards" : 0, >>>> "initializing_shards" : 0, >>>> "unassigned_shards" : 1, >>>> "delayed_unassigned_shards" : 0, >>>> "number_of_pending_tasks" : 0, >>>> "number_of_in_flight_fetch" : 0 >>>> } >>>> >>>> >>>> >>>> >>>> >>>> On Tuesday, July 21, 2015 at 9:54:23 AM UTC-3, Juan Andres Ramirez >>>> wrote: >>>>> >>>>> Hello guys, >>>>> I was searching the answer in this group and in the web, but I >>>>> can't found the answer. >>>>> >>>>> 1- Graylog create 1 shard per indice?, so in this moment I have 17 >>>>> shards and in my config I have : >>>>> elasticsearch_shards = 1 >>>>> elasticsearch_replicas = 0 >>>>> >>>>> So I'm in development phase, I don't need replicas. >>>>> >>>>> 2- If I will change in config elasticsearch_shards = 2 , then I'm >>>>> going to have 34 shards 2 per index?. >>>>> >>>>> My last question, If I'm going to create an Elasticsearch a cluster >>>>> with 4 nodes and change the setup elasticsearch_replicas = 1 , I'm going >>>>> to >>>>> have 17 shard in every node automatically? >>>>> >>>>> I have problem to know how to work the elasticsearch cluster and the >>>>> configuration to failover. >>>>> >>>>> Thank you. >>>>> >>>> -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.